$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/052B1D7648C211EE8AAB1160C4F9AE02.roa File: 052B1D7648C211EE8AAB1160C4F9AE02.roa (raw, json) Hash identifier: gjI0XPBHfEkzoRs81Ib4twvyMMys/Y45J9u5EIyOEXk= Subject key identifier: 69:D7:52:07:0E:78:48:B2:E5:A0:47:F0:0A:7B:46:8E:65:38:4F:F7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F87B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/052B1D7648C211EE8AAB1160C4F9AE02.roa Signing time: Wed 15 Jul 2026 06:32:18 +0000 ROA not before: Wed 15 Jul 2026 06:32:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 103.167.152.0/24 maxlen: 24 103.167.153.0/24 maxlen: 24 2001:df4:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63611 (0xf87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 15 06:32:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a572972-cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:17:f2:b3:69:bf:ab:5f:17:70:58:91:68: ec:7b:6a:19:7b:8d:c8:78:d1:bc:0c:4c:bc:95:56: c2:77:ba:2c:33:ad:ca:a9:f6:f8:bf:39:e4:07:b1: ed:9b:91:9b:b0:3d:78:7e:1d:8a:29:24:c8:5d:84: 79:8b:84:6b:19:f3:c0:6c:e6:32:d1:a0:18:77:a8: 0c:0e:d5:86:07:c8:35:2d:b3:d7:80:db:1b:95:c6: 6c:fa:bf:94:57:c9:2c:8e:85:7e:64:35:67:88:c2: bc:d3:15:05:3b:ce:1b:85:71:51:db:f9:9d:71:40: 70:a6:39:83:fd:4a:9a:6d:9f:d5:5c:35:6f:f5:20: 24:2d:ba:29:72:d4:15:83:6c:40:6c:77:cb:46:e3: 7c:f4:19:79:fd:2c:9d:24:d3:21:5e:50:d2:4f:8c: ab:1a:61:29:e5:1b:dc:8b:50:59:f2:b8:9b:4d:2a: 14:98:30:9f:bf:81:3c:72:b3:b0:6c:28:3d:0d:c4: 93:4d:43:a0:87:72:ab:9c:1b:9f:69:f6:f4:f6:d0: 8c:28:7a:bb:d5:b9:90:af:e0:d1:44:3b:88:cc:dd: a0:c1:ce:82:9c:b8:7c:30:c7:08:a9:4a:d2:6f:49: 21:a5:56:b9:3a:45:45:aa:d7:f5:c3:0a:f4:1e:c7: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:52:07:0E:78:48:B2:E5:A0:47:F0:0A:7B:46:8E:65:38:4F:F7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/052B1D7648C211EE8AAB1160C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.152.0/23 IPv6: 2001:df4:4c40::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e2:ab:4b:b4:b3:64:68:cd:60:36:4b:87:dc:cf:21:8e:a6: d7:8d:e3:03:82:f4:6c:ab:93:32:73:04:66:6c:e9:75:29:95: 9f:e7:72:72:3a:04:e9:39:4b:80:b1:74:8b:91:b9:ce:24:45: 2a:84:dc:c3:a5:eb:ac:7c:65:b5:5c:7a:30:f0:ad:fb:c8:59: 06:25:77:af:21:25:a8:f1:49:be:0c:af:47:18:6a:3c:7f:49: ec:0f:e4:c7:74:a1:2f:cf:44:bc:ca:d5:cf:41:d7:8a:86:91: df:ab:7f:8d:e6:a7:40:89:a4:d4:3e:e9:c0:0b:cb:5a:41:db: 2a:31:14:b3:61:88:71:3f:3f:c6:94:c5:d8:18:3b:d5:68:34: 93:33:96:c4:3c:c0:b5:e1:c6:1d:26:e1:61:cf:4d:03:20:88: 44:b6:e6:4d:56:74:e7:b1:97:9b:d4:af:be:ab:ef:a8:17:17: 50:e4:16:91:c7:1f:59:61:ae:78:ca:5f:a7:9f:54:c1:ce:c5: 0f:40:e6:0d:0a:90:24:8c:1f:58:12:ab:d7:d3:0a:8c:3a:90: 6a:48:5e:0d:07:af:81:8d:18:2d:07:24:96:4b:bc:12:df:71: 1a:7f:db:65:5f:8d:d3:39:1a:10:a0:9c:f2:fe:69:48:2a:53: 51:c0:d0:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPh7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcxNTA2MzIxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE1NzI5NzItY2YxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtvF/Kzab+rXxdwWJFo7HtqGXuNyHjRvAxMvJVWwne6LDOtyqn2+L855Aex 7ZuRm7A9eH4diikkyF2EeYuEaxnzwGzmMtGgGHeoDA7VhgfINS2z14DbG5XGbPq/ lFfJLI6FfmQ1Z4jCvNMVBTvOG4VxUdv5nXFAcKY5g/1Kmm2f1Vw1b/UgJC26KXLU FYNsQGx3y0bjfPQZef0snSTTIV5Q0k+MqxphKeUb3ItQWfK4m00qFJgwn7+BPHKz sGwoPQ3Ek01DoIdyq5wbn2n29PbQjCh6u9W5kK/g0UQ7iMzdoMHOgpy4fDDHCKlK 0m9JIaVWuTpFRarX9cMK9B7H0JMCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRp11IH DnhIsuWgR/AKe0aOZThP9zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA1MkIxRDc2 NDhDMjExRUU4QUFCMTE2MEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAWenmDAPBAIAAjAJAwcAIAEN9ExAMA0GCSqGSIb3DQEBCwUAA4IB AQBP4qtLtLNkaM1gNkuH3M8hjqbXjeMDgvRsq5MycwRmbOl1KZWf53JyOgTpOUuA sXSLkbnOJEUqhNzDpeusfGW1XHow8K37yFkGJXevISWo8Um+DK9HGGo8f0nsD+TH dKEvz0S8ytXPQdeKhpHfq3+N5qdAiaTUPunAC8taQdsqMRSzYYhxPz/GlMXYGDvV aDSTM5bEPMC14cYdJuFhz00DIIhEtuZNVnTnsZeb1K++q++oFxdQ5BaRxx9ZYa54 yl+nn1TBzsUPQOYNCpAkjB9YEqvX0wqMOpBqSF4NB6+BjRgtBySWS7wS33Eaf9tl X43TORoQoJzy/mlIKlNRwNAg -----END CERTIFICATE-----Generated at Wed Jul 22 21:16:25 2026 by rpki-client